Sillenttrinity
Last updated
Was this helpful?
Last updated
Was this helpful?
SILENTTRINITY is modern, asynchronous, multiplayer & multiserver C2/post-exploitation framework powered by Python 3 and .NETs DLR. It's the culmination of an extensive amount of research into using embedded third-party .NET scripting languages to dynamically call .NET API's, a technique the author coined as BYOI (Bring Your Own Interpreter). The aim of this tool and the BYOI concept is to shift the paradigm back to PowerShell style like attacks (as it offers much more flexibility over traditional C# tradecraft) only without using PowerShell in anyway.
Some of the main features that distinguish SILENTTRINITY are:
Multi-User & Multi-Server - Supports multi-user collaboration. Additionally, the client can connect to and control multiple Teamservers.
Client and Teamserver Built in Python 3.7 - Latest and greatest features of the Python language are used, heavy use of Asyncio provides ludicrous speeds.
Real-time Updates and Communication - Use of Websockets allow for real-time communication and updates between the Client and Teamserver.
ECDHE Encrypted C2 Communication - SILENTTRINITY uses Ephemeral Elliptic Curve Diffie-Hellman Key Exchange to encrypt all C2 traffic between the Teamserver and its implant.
Fully Modular - Listeners, Modules, Stagers and C2 Channels are fully modular allowing operators to easily build their own.
Extensive logging - Every action is logged to a file.
Come hang out on discord!
I'm just one person developing this mostly in my spare time, I do need to have a life outside of computers (radical idea, I know).
This means that if anyone finds this tool useful and would like to see X functionality added, the best way to get it added is to submit a Pull Request.
Be the change you want to see in the world!
As of the time of writing the most useful thing you can contribute are post-ex modules: this would allow me to concentrate efforts on the framework itself, user experience, QOL features etc...
I recommend making wild use the help command and the -h flag :)
(In no particular order)
Focus on Usability with an Extremely Modern CLI - Powered by .
Dynamic Evaluation/Compilation Using .NET Scripting Languages - The SILENTTRINITY implant , is somewhat unique as it uses embedded third-party .NET scripting languages (e.g. ) to dynamically compile/evaluate tasks, this removes the need to compile tasks server side, allows for real-time editing of modules, provides greater flexibilty and stealth over traditional C# based payloads and makes everything much more light-weight.
Future proof - HTTPS/HTTP listeners are built on & which also support HTTP2 & Websockets.
To do this, you're going to have to learn the Boo programming language (the Boo is amazing and has everything you'd need to get started), if you know Python you'll find yourself at home :).
Check out some of the existing , if you've written an module before you'll see its very similar. Finally you can start porting over post-ex modules from other C2 frameworks such as .
The documentation is a work in progress but some is already available in the .
See for install instructions and for basic usage.
Marcello Salvati ()
for some awesome modules.
for some awesome modules.
a.k.a for contributing an insane amount of modules.
for helping me with some of the .NET ECDHE implementation details and keeping my sanity.
for making some amazing contributions including a cross-platform stager.
a.k.a daddycocoaman, for being awesome and making code contributions including modules.
for the amazing work on and for being a general inspiration.
for writing which was heavily used as a reference throughout building a lot of the implant code & modules.
for writing which I stole (won't be the least thing I'll steal from him either!) and ported over to Boolang and for being a general inspiration.
& Odzhan for writing which SILENTTRINITY makes heavy use of.
for helping me with a bunch of low level windows stuff which one day I'll learn when I decide to grow up.
for making an AMSI Patch which I stole and for being a general inspiration.
for making an AMSI Patch which I stole and for being a general inspiration.
for writing his awesome , decent amount of SILENTTRINITY modules are based off of those scripts.
for stealing a bunch of stuff from his repository.
for some awesome modules.
